Added to the likely_server_ports set for protocols with analyzers.

- Updated some tests since Bro is getting the direction
  correct now.

- Updated BPF filter test since I added a few ports to IRC
  as well.

scripts/base/protocols/ssh/main.bro

@@ -73,6 +73,8 @@ export {
 redef capture_filters += { ["ssh"] = "tcp port 22" };
 redef dpd_config += { [ANALYZER_SSH] = [$ports = set(22/tcp)] };
 
+redef likely_server_ports += { 22/tcp };
+
 redef record connection += {
 	ssh: Info &optional;
 };